Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
23fbdff109d7dc6d51b7747f94ab3373_JaffaCakes118
-
Size
217KB
-
Sample
240704-ame2astfkr
-
MD5
23fbdff109d7dc6d51b7747f94ab3373
-
SHA1
830401e58c42a95c7b823c3bf60760c88fbab5dd
-
SHA256
8551076256854d724484fad6fa2156f3529ba5bd6074ede64a8f77c4843643fc
-
SHA512
4c6fa36dc60b496fbd7d2e4e2ebc293311e99e6cc35a79cdfb7bbc1437e5fc365346b6a9ecc0ed5e852c72ee55ce0c635f10f92cd632d8a42549f733dd66ea8b
-
SSDEEP
3072:obpDCw1p3vmLvsZIaVwiwDcIbDHDCm/DER4eQB17lgVUInUpmsPssU9I:gDCwfG1bnxLERRMlmjUosPsdI
Static task
static1
Behavioral task
behavioral1
Sample
23fbdff109d7dc6d51b7747f94ab3373_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
23fbdff109d7dc6d51b7747f94ab3373_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
23fbdff109d7dc6d51b7747f94ab3373_JaffaCakes118
-
Size
217KB
-
MD5
23fbdff109d7dc6d51b7747f94ab3373
-
SHA1
830401e58c42a95c7b823c3bf60760c88fbab5dd
-
SHA256
8551076256854d724484fad6fa2156f3529ba5bd6074ede64a8f77c4843643fc
-
SHA512
4c6fa36dc60b496fbd7d2e4e2ebc293311e99e6cc35a79cdfb7bbc1437e5fc365346b6a9ecc0ed5e852c72ee55ce0c635f10f92cd632d8a42549f733dd66ea8b
-
SSDEEP
3072:obpDCw1p3vmLvsZIaVwiwDcIbDHDCm/DER4eQB17lgVUInUpmsPssU9I:gDCwfG1bnxLERRMlmjUosPsdI
Score10/10-
Modifies visibility of file extensions in Explorer
-
Modifies visiblity of hidden/system files in Explorer
-
Adds policy Run key to start application
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Impair Defenses: Safe Mode Boot
-
Loads dropped DLL
-
Adds Run key to start application
-